ESXi System Login Panel - Detect

What is the "ESXi System Login Panel - Detect?" module?

The "ESXi System Login Panel - Detect" module is designed to detect the presence of the ESXi System login panel. ESXi is a software platform used for virtualization, and the login panel is the interface used to access and manage the system. This module focuses on detecting the login panel and does not perform any further actions.

This module has an informative severity level, which means it provides valuable information but does not indicate a vulnerability or misconfiguration.

This module was authored by dhiyaneshDK.

Impact

The impact of this module is limited to providing information about the presence of the ESXi System login panel. It does not indicate any specific vulnerabilities or misconfigurations.

How does the module work?

The module works by sending an HTTP GET request to the "/ui/#/login" path of the target system. It then applies two matching conditions to determine if the ESXi System login panel is present:

- The first matching condition checks if the response body contains the string "ng-app="esxUiApp"". - The second matching condition checks if the response status code is 200 (OK).

If both matching conditions are met, the module reports the detection of the ESXi System login panel.

Example HTTP request:

GET /ui/#/login

Matching conditions:

- Response body contains "ng-app="esxUiApp""
- Response status code is 200